Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 260
  • Last Modified:

InvalidSecurity certificate

If you visit a site with an expired certificate, is  your "conversation" with this site no longer encrypted?
0
lairdreed
Asked:
lairdreed
  • 2
1 Solution
 
briandunkleCommented:
Depends whether you override the browser and allow the certificate. If you allow it, and the URL shows "HTTPS" rather than "HTTP", it's still encrypted.
It's similar to self-generated certificates. You'll get the warning about it being invalid, but if you accept it anyway, you're still encrypted.
The "validity" (issued by a trusted authority) and expiration are entirely separate from the encryption.
0
 
briandunkleCommented:
"override the browser's objection" I mean, and force it to continue, or import the certificate, or whatever your particular browser says.
0
 
lairdreedAuthor Commented:
Thank you for the input.
0

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now